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DETAILED ACTION 

Allowable Subject Matter 

1 . Claims 2-21 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

2.1 Referring to the independent claims 2, 8, 12 and 18, Kung discloses a method 
for providing mutual authentication of a user and a server on a network (see abstract 
and Fig.1). 

Kung teaches a mutual authentication method for use in authenticating a user 
that operates a client workstation that is coupled to a file server workstation 
having a password file comprising a password known to the user (see Fig. 1 and 
column 1 , lines 47-50). Kung teaches that the method comprises the 
following steps: A logon ID is transmitted from the client workstation to the server 
workstation. The stored user password corresponding to the user ID is retrieved 
using the transmitted logon ID is retrieved from the password file. A random 
number is created that is encrypted by a symmetric encryption algorithm on the 
server workstation using the retrieved user password, and which provides an 
encrypted password. The user is then requested to enter the password into the 
user workstation. The entered password is used to decrypt the encrypted 
password received from the server workstation and retrieve the random number 
therefrom to authenticate the server workstation. The random number is then 
used as the encryption and decryption key for communication between the user 
and server workstations. An encrypted message is transmitted using the random 
number from the client workstation to the server workstation. The encrypted 
message is decrypted at the server workstation to authenticate the user (see 
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column 1, lines 53-68). 

Kung, however, fails to teach or suggest decrypting the server authentication 
response without user interaction in order to prevent a user from colluding with an 
authorized server. Kung also does not teach disabling client functions 
if the server is not authorized to provide resource to the client. 

2.2 Referring to the instant claims, McAuliffe discloses an advertisement 
authentication system in which advertisements are downloaded for off-line 
display (see abstract and Fig. 1 A). McAuliffe shows a client computer connected 
to the server computers over the network (see units 2 and 20, 22, 24, 25, 27 in 
Fig. 1 A). McAuliffe teaches advertisement authentication system capable 

of detecting various forms of advertisement and statistics file tampering. McAuliffe 
teaches that client software disabling are instituted after multiple incidents of 
"tampering" are detected within a short time period (see column 11, lines 9-12). 
However, the limitation "determining that no response to the server authentication 
request has been received by the client after an allotted period of time" is not either 
taught or suggested by McAuliffe. Therefore, the combination of Kung with McAuliffe 
will not produce the Applicant's invention. 

2.3 In view of the reasons presented herein claims 2-21 are in condition for allowance. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is 
(571 )272-3803. The examiner can normally be reached on 9 AM-5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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